vulnerability
-
Ethereum Client Patches Vulnerability Allowing Attackers to Redirect ETH Rewards
Ethereum clients patched a vulnerability that could have allowed attackers to redirect ETH rewards. The flaw stemmed from an error by Indian certificate authority eMudhra, which led some Teku and Besu
-
Bitcoinjs-lib patches transaction fee vulnerabilities
Bitcoinjs-lib, a library for building Bitcoin applications, has patched two vulnerabilities that could cause related software to underestimate valid transaction fees and miss warnings for excessively
-
Crypto wallet Vultisig has patched a critical private key leakage vulnerability
Crypto wallet Vultisig has patched a critical private key leakage vulnerability, which previously allowed compromised signers to recover private keys through malicious ECDSA messages. Security researc
-
BTCPay Server merged an API key vulnerability fix on October 19
BTCPay Server merged an API key vulnerability fix on October 19, but its latest public release (v2.4.5, Oct 6) still predates the patch as of October 26. The fix addresses a gap that could allow API k
-
On October 25, researcher Killa successfully executed code on the "Steal My Bitcoin" challenge server
On October 25, researcher Killa successfully executed code on the "Steal My Bitcoin" challenge server, extracting hidden wallet credentials and winning a Bitcoin bounty. The challenge aimed to test th
-
Malicious servers could manipulate payment information displayed to users before they authorized additional fees
Electrum Wallet has patched a high-severity vulnerability that allowed hackers to redirect Bitcoin payments when users attempted to increase transaction fees, enabling funds to be stolen without priva
-
CloudFlare CEO warns of PHP-scale internet dangers, detecting 1 million attacks per minute
CloudFlare CEO Matthew Prince stated in an interview with Nikkei on Friday that internet vulnerabilities on the same scale as recent flaws in the PHP programming language will emerge. He is currently
-
Shaw Publishes Daos.fun Reconstruction Report, Claims Critical Flaw
Shaw has published a reconstruction report for Daos.fun, claiming to have discovered a critical flaw. The report indicates that captured and rebuilt binaries match. Daos.fun stated it no longer mainta
-
Succinct fixes SP1 vulnerability that could lead to invalid proofs being accepted.
Zero-knowledge proof infrastructure provider Succinct has fixed a vulnerability in its SP1 proving system that could have allowed invalid proofs to pass. The flaw affected native Rust verification in
-
PHP vulnerability fix released, millions of attack attempts but government claims no successful intrusions yet
PHP released vulnerability fixes for several versions, including 8.5.12, on Wednesday to address the previously discovered PHP2Shell vulnerability. Cloudflare CEO Matthew Prince stated that their netw
-
Cloudflare CEO Matthew Prince warns of millions of exploit attempts targeting PHP flaw, even before public disclosure
Cloudflare CEO Matthew Prince stated that the network observed thousands of exploit attempts related to the PHP vulnerability even before it was publicly disclosed, with millions of attempts occurring
-
Changpeng Zhao warns of a high-severity vulnerability in PHP affecting popular applications like WordPress; a patch was released on October 21.
Binance founder Changpeng Zhao (CZ) issued a warning to users about two high-severity vulnerabilities (CVE-2026-109618 and CVE-2026-109619) discovered in the PHP programming language. These vulnerabil
-
The U.S. National Security Agency (NSA) is urging PHP users to patch two critical 9.2-severity vulnerabilities that could allow unauthenticated attackers to execute code on web servers.
The U.S. National Security Agency (NSA) is urging PHP users to patch two critical 9.2-severity vulnerabilities that could allow unauthenticated attackers to execute code on web servers.
-
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns Due to Two Critical Flaws Allowing Remote Code Execution
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns Due to Two Critical Flaws Allowing Remote Code Execution
-
OpenAI: PHP Vulnerability Is One of the Most Impactful in Recent Memory Due to Its Severity and Widespread Use
OpenAI: PHP Vulnerability Is One of the Most Impactful in Recent Memory Due to Its Severity and Widespread Use
-
Critical PHP Vulnerability Affects 70% of Global Websites; Patch Released Early Due to Details Leak
A company stated that a critical vulnerability exists in PHP, affecting up to 70% of websites globally, including WordPress and many government and e-commerce sites. Security researchers claim the vul
-
CertiK warns eMudhra flaw may leave crypto bots exposed
Blockchain security firm CertiK warns that crypto trading bots and exchange applications may remain exposed to the eMudhra certificate flaw, as browser fixes may not protect all software.
-
Finland, the Netherlands, and France have shut down or taken offline some government internet services/websites due to a PHP vulnerability.
Finland has shut down national internet services due to PHP vulnerabilities, while the Dutch National Cyber Security Centre has taken websites offline, and France has temporarily taken down provincial
-
Security researcher Bürgel stated that a critical PHP vulnerability was circulating before the patch was released. PHP plans to release the patch at 10 AM ET, and security advisories urge operators to limit exposed services and prepare to patch immediately.
Security researcher Bürgel stated that a critical PHP vulnerability was circulating before the patch was released. PHP plans to release the patch at 10 AM ET, and security advisories urge operators to
-
NEAR Intents Protocol links $3.8M exploit to deposit bug
NEAR Intents Protocol's postmortem report linked a $3.8 million exploit to a deposit bug. The protocol has since removed deposit notifications after another critical bug report and stated that all aff
-
The bOSMO project has initiated a compensation plan due to a vulnerability that allowed low-cost token minting, putting liquidity pools at risk. However, tokens purchased after a specific snapshot date are not eligible for compensation.
The bOSMO project has initiated a compensation plan due to a vulnerability that allowed low-cost token minting, putting liquidity pools at risk. However, tokens purchased after a specific snapshot dat
-
Protos: XRPN Shareholders Voted for Listing Without Knowing About Inflation Bug That Could Allow Trillions of XRP to Be Minted
According to Protos, shareholders of Evernorth Holdings (XRPN) were unaware of a critical inflation bug in the XRP Ledger when they voted on September 30 to approve the company's Nasdaq listing plan.
-
XRP Ledger Foundation addresses critical bug that could have minted trillions of XRP
The XRP Ledger Foundation has addressed a critical vulnerability, present since 2015 and recently uncovered by Veria Labs, that could have allowed malicious actors to mint up to 18.45 trillion XRP, by
-
XRP Kuwait Pushes Back Against Centralization Criticisms After XRP Ledger Emergency Fix for Vulnerability
XRP Kuwait validator issued a public rebuttal, responding to accusations of losing its independence following an emergency network update. Previously, the XRP Ledger was forced to undergo an emergency
-
Ethereum Client Patches Vulnerability Allowing Attackers to Redirect ETH Rewards
Ethereum clients patched a vulnerability that could have allowed attackers to redirect ETH rewards. The flaw stemmed from an error by Indian certificate authority eMudhra, which led some Teku and Besu
-
Bitcoinjs-lib patches transaction fee vulnerabilities
Bitcoinjs-lib, a library for building Bitcoin applications, has patched two vulnerabilities that could cause related software to underestimate valid transaction fees and miss warnings for excessively
-
Crypto wallet Vultisig has patched a critical private key leakage vulnerability
Crypto wallet Vultisig has patched a critical private key leakage vulnerability, which previously allowed compromised signers to recover private keys through malicious ECDSA messages. Security researc
-
BTCPay Server merged an API key vulnerability fix on October 19
BTCPay Server merged an API key vulnerability fix on October 19, but its latest public release (v2.4.5, Oct 6) still predates the patch as of October 26. The fix addresses a gap that could allow API k
-
On October 25, researcher Killa successfully executed code on the "Steal My Bitcoin" challenge server
On October 25, researcher Killa successfully executed code on the "Steal My Bitcoin" challenge server, extracting hidden wallet credentials and winning a Bitcoin bounty. The challenge aimed to test th
-
Malicious servers could manipulate payment information displayed to users before they authorized additional fees
Electrum Wallet has patched a high-severity vulnerability that allowed hackers to redirect Bitcoin payments when users attempted to increase transaction fees, enabling funds to be stolen without priva
-
CloudFlare CEO warns of PHP-scale internet dangers, detecting 1 million attacks per minute
CloudFlare CEO Matthew Prince stated in an interview with Nikkei on Friday that internet vulnerabilities on the same scale as recent flaws in the PHP programming language will emerge. He is currently
-
Shaw Publishes Daos.fun Reconstruction Report, Claims Critical Flaw
Shaw has published a reconstruction report for Daos.fun, claiming to have discovered a critical flaw. The report indicates that captured and rebuilt binaries match. Daos.fun stated it no longer mainta
-
Succinct fixes SP1 vulnerability that could lead to invalid proofs being accepted.
Zero-knowledge proof infrastructure provider Succinct has fixed a vulnerability in its SP1 proving system that could have allowed invalid proofs to pass. The flaw affected native Rust verification in
-
PHP vulnerability fix released, millions of attack attempts but government claims no successful intrusions yet
PHP released vulnerability fixes for several versions, including 8.5.12, on Wednesday to address the previously discovered PHP2Shell vulnerability. Cloudflare CEO Matthew Prince stated that their netw
-
Cloudflare CEO Matthew Prince warns of millions of exploit attempts targeting PHP flaw, even before public disclosure
Cloudflare CEO Matthew Prince stated that the network observed thousands of exploit attempts related to the PHP vulnerability even before it was publicly disclosed, with millions of attempts occurring
-
Changpeng Zhao warns of a high-severity vulnerability in PHP affecting popular applications like WordPress; a patch was released on October 21.
Binance founder Changpeng Zhao (CZ) issued a warning to users about two high-severity vulnerabilities (CVE-2026-109618 and CVE-2026-109619) discovered in the PHP programming language. These vulnerabil
-
The U.S. National Security Agency (NSA) is urging PHP users to patch two critical 9.2-severity vulnerabilities that could allow unauthenticated attackers to execute code on web servers.
The U.S. National Security Agency (NSA) is urging PHP users to patch two critical 9.2-severity vulnerabilities that could allow unauthenticated attackers to execute code on web servers.
-
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns Due to Two Critical Flaws Allowing Remote Code Execution
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns Due to Two Critical Flaws Allowing Remote Code Execution
-
OpenAI: PHP Vulnerability Is One of the Most Impactful in Recent Memory Due to Its Severity and Widespread Use
OpenAI: PHP Vulnerability Is One of the Most Impactful in Recent Memory Due to Its Severity and Widespread Use
-
Critical PHP Vulnerability Affects 70% of Global Websites; Patch Released Early Due to Details Leak
A company stated that a critical vulnerability exists in PHP, affecting up to 70% of websites globally, including WordPress and many government and e-commerce sites. Security researchers claim the vul
-
CertiK warns eMudhra flaw may leave crypto bots exposed
Blockchain security firm CertiK warns that crypto trading bots and exchange applications may remain exposed to the eMudhra certificate flaw, as browser fixes may not protect all software.
-
Finland, the Netherlands, and France have shut down or taken offline some government internet services/websites due to a PHP vulnerability.
Finland has shut down national internet services due to PHP vulnerabilities, while the Dutch National Cyber Security Centre has taken websites offline, and France has temporarily taken down provincial
-
Security researcher Bürgel stated that a critical PHP vulnerability was circulating before the patch was released. PHP plans to release the patch at 10 AM ET, and security advisories urge operators to limit exposed services and prepare to patch immediately.
Security researcher Bürgel stated that a critical PHP vulnerability was circulating before the patch was released. PHP plans to release the patch at 10 AM ET, and security advisories urge operators to
-
NEAR Intents Protocol links $3.8M exploit to deposit bug
NEAR Intents Protocol's postmortem report linked a $3.8 million exploit to a deposit bug. The protocol has since removed deposit notifications after another critical bug report and stated that all aff
-
The bOSMO project has initiated a compensation plan due to a vulnerability that allowed low-cost token minting, putting liquidity pools at risk. However, tokens purchased after a specific snapshot date are not eligible for compensation.
The bOSMO project has initiated a compensation plan due to a vulnerability that allowed low-cost token minting, putting liquidity pools at risk. However, tokens purchased after a specific snapshot dat
-
Protos: XRPN Shareholders Voted for Listing Without Knowing About Inflation Bug That Could Allow Trillions of XRP to Be Minted
According to Protos, shareholders of Evernorth Holdings (XRPN) were unaware of a critical inflation bug in the XRP Ledger when they voted on September 30 to approve the company's Nasdaq listing plan.
-
XRP Ledger Foundation addresses critical bug that could have minted trillions of XRP
The XRP Ledger Foundation has addressed a critical vulnerability, present since 2015 and recently uncovered by Veria Labs, that could have allowed malicious actors to mint up to 18.45 trillion XRP, by
-
XRP Kuwait Pushes Back Against Centralization Criticisms After XRP Ledger Emergency Fix for Vulnerability
XRP Kuwait validator issued a public rebuttal, responding to accusations of losing its independence following an emergency network update. Previously, the XRP Ledger was forced to undergo an emergency
- No data
vulnerability
24H Trending
-
1
Samsung Electronics fell 5.99% from its previous close, now trading at ₩227,500.
-
2
Samsung Electronics is down 4.44% from its previous close, now trading at ₩231,250.
-
3
Former Aptos advisor "Buzz" leaves project, shifts meme marketing efforts to Meta stock
-
4
Cryptocurrency Investing for Beginners: A Guide to Buying and Asset Management
-
5
WOL Token: Current Status and Investment Considerations for World of Legends
-
6
Nikkei Asia: Iranian separatists intensify attacks and seize territory in response to a potential full-scale US assault.
-
7
FOR Token (ForTube) Issuance Price and Project Analysis
-
8
The Federal Reserve maintained interest rates, with a 10-2 vote. Lisa Cook and Beth Hammack voted in favor of a rate hike.
-
9
President Trump returns to Ohio, highlighting over $100 billion in private investment attracted to the state during his term.
-
10
A Boston office building was sold at a foreclosure auction for one-third of its 2019 price, representing a discount of approximately $546 million.
Markets Today
Recommended Reading

